IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2021-29813IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting.
- CVE-2021-29812IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting.
- CVE-2021-29810IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting.
- CVE-2021-38870IBM Aspera Cloud is vulnerable to stored cross-site scripting.
- CVE-2021-38864IBM Security Verify Bridge 1.0.5.0 could allow a user to obtain sensitive information due to improper certificate validation.
- CVE-2021-20563IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 could allow a remote authenciated user to obtain sensitive information.
- CVE-2021-20485IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 could allow a remote attacker to obtain sensitive information when a detailed technical er
- CVE-2021-20484IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 is vulnerable to cross-site scripting.
- CVE-2021-20435IBM Security Verify Bridge 1.0.5.0 does not properly validate a certificate which could allow a local attacker to obtain sensitive informati
- CVE-2021-20434IBM Security Verify Bridge 1.0.5.0 stores user credentials in plain clear text which can be read by a local user.
- CVE-2020-4941IBM Edge 4.2 could reveal sensitive version information about the server from error pages that could aid an attacker in further attacks agai
- CVE-2021-38863IBM Security Verify Bridge 1.0.5.0 stores user credentials in plain clear text which can be read by a locally authenticated user.
- CVE-2021-29800IBM Tivoli Netcool/OMNIbus_GUI and IBM Jazz for Service Management 1.1.3.10 is vulnerable to stored cross-site scripting.
- CVE-2021-20377IBM Security Guardium 11.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned
- CVE-2020-4809IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system.
- CVE-2020-4805IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system.
- CVE-2020-4803IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system.
- CVE-2020-4690IBM Security Guardium 11.3 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authe
- CVE-2021-29831IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to an XML External Entity Injection (XXE) attack w
- CVE-2021-29795IBM PowerVM Hypervisor FW860, FW930, FW940, and FW950 could allow a local user to create a specially crafted sequence of hypervisor calls fr
- CVE-2021-38899IBM Cloud Pak for Data 2.5 could allow a local user with special privileges to obtain highly sensitive information.
- CVE-2021-29856IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 could allow an authenticated usre to cause a denial of service through the WebGUI Map Creation page.
- CVE-2021-29821IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting.
- CVE-2021-29820IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting.
- CVE-2021-29819IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting.
- CVE-2021-29818IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting.
- CVE-2021-29817IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting.
- CVE-2021-29811IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 stores user credentials in plain clear text which can be read by an
- CVE-2021-29809IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting.
- CVE-2021-29808IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting.